jas502n/CVE-2019-2888

PoC

WebLogic EJBTaglibDescriptor XXE漏洞(CVE-2019-2888)

view exploit source poc_in_githubauthor jas502npublished 2019-11-01catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-2888US	medium5.3	5.34% (93rd)	Exploit	2019-10-16
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.